Critical Security Updates: Cisco Fixes SD-WAN Vulnerability, Microsoft Exchange Exploited
Vulnerabilities Patched and Exploited
Cisco has patched a zero-day vulnerability in its SD-WAN Controller that has been exploited by a highly sophisticated cyber threat actor.
CVE-2026-20182 Authentication Bypass Flaw
The vulnerability affects the Catalyst SD-WAN Controller and is currently being tracked as CVE-2026-20182.
Microsoft Exchange Server Vulnerability
A critical XSS vulnerability (CVE-2026-42897) in Microsoft Exchange Server is also being exploited by attackers. A permanent fix is still in the works, but Microsoft has provided temporary mitigations to prevent exploitation.
Linux Kernel Vulnerability
A newly disclosed local privilege escalation (LPE) vulnerability in the Linux kernel, known as “Fragnesia” (CVE-2026-46300), has been discovered. This vulnerability is related to the previously disclosed “Dirty Frag” bug and could potentially allow attackers to gain elevated privileges on affected systems.
Importance of Timely Patching
These vulnerabilities highlight the importance of timely patching and the need for organizations to stay vigilant against emerging threats.
Div Quote
Temporary Mitigations
Microsoft has provided temporary mitigations to prevent exploitation of the XSS vulnerability in Microsoft Exchange Server.